CVE-2002-0083
security flaw
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD.
Açıklama
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
Etkilenen paketler ve düzeltilmiş sürümler
Bu ID'yi listeleyen bir paket kaynağı yok.
Referanslar
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc
- ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt
- ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt
- http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467
- http://marc.info/?l=bugtraq&m=101552065005254&w=2
26 referansın hepsi
- http://marc.info/?l=bugtraq&m=101553908201861&w=2
- http://marc.info/?l=bugtraq&m=101561384821761&w=2
- http://marc.info/?l=bugtraq&m=101586991827622&w=2
- http://online.securityfocus.com/advisories/3960
- http://online.securityfocus.com/archive/1/264657
- http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt
- http://www.debian.org/security/2002/dsa-119
- http://www.iss.net/security_center/static/8383.php
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php
- http://www.linuxsecurity.com/advisories/other_advisory-1937.html
- http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html
- http://www.openbsd.org/advisories/ssh_channelalloc.txt
- http://www.osvdb.org/730
- http://www.redhat.com/support/errata/RHSA-2002-043.html
- http://www.securityfocus.com/bid/4241
- https://access.redhat.com/security/cve/CVE-2002-0083
- https://nvd.nist.gov/vuln/detail/CVE-2002-0083
- https://www.cve.org/CVERecord?id=CVE-2002-0083